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lateral pilot control input, rad 

longitudinal pilot control input, rad 

helicopter rate of climb 

body axis roll rate, rad/sec 

body axis pitch rate, rad/sec 

body axis yaw rate, rad/sec 

x-body axis inertial velocity, ft/sec, m/sec 

longitudinal component of relative wind in wind control axis 
system, ft/sec, m/sec 

control commands to actuators, rad/sec^ 

control command to actuator, ft/sec^, m/sec^ 

y-body axis inertial velocity, ft/sec, m/sec 

2-body axis inertial velocity, ft/sec, m/sec 

pilot's lateral stick displacement, in., cm 

pilot's collective stick displacement, in., cm 

pilot's longitudinal stick displacement, in., cm 

pilot's pedal displacement, in., cm 

aircraft pitch altitude Euler angle 

main rotor collective pitch 

tail rotor collective pitch 

aircraft roll attitude 

aircraft heading 

center-and-lock time constant, sec 
monitor delay time, sec 

amplitude of total cyclic pitch control input, rad 
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AX longitudinal displacement of helicopter following servo failure, ft, m 

AY lateral displacement of helicopter following servo failure, ft, m 

Ah height loss of helicopter following servo failure, ft, m 

Subscripts y 

TR tail rotor 

VF vertical fin 

HS horizontal stabilizer 

IC inertial conditions - trimmed conditions for the helicopter 

m model 
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NOTATIONS FOR APPENDIX B 
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H,d,ip 
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initial conditions (I.C.) of simulator x,y,z 
simulator x,y,z commands (including I.C.) 

simulator drive accelerations used in the calculation of load 
factors along x,y,z axes 

desired simulator x,y,z (excluding I.C.) 

desired simulator x,y,z 

equivalent translational acceleration along x,y,z axes 

simulator position (from cab or computer) along x,y,z axes 

calculated earth axes accelerations at the pilot station along 
x,y,z axes (inputs to high-pass filter) 

output of high-pass filter (multiplied by gains Ki ) along 

x,y,z axes 

gravitational accelerations, due to cab residual tilt, along 
x,y,z axes 

limits of x,y,z 

limits of x,y,z 

limits of x,y,z 

initial conditions (I.C.) of simulator 4>,d,\p 
simulator commands (including I.C.) 

desired simulator 

calculated body axes accelerations at the pilot station along 
(p,Q,ip (input to high-pass filter) 

output of high-pass filter (multiplied by gains Ki, „ ,) along 
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x,y,z 
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TMij 

(i,j =1,2,3) 
x,y,z 

^^i,yl, zi 

(1 = 1 , 2 ) 


acceleration due to gravity 

washout gains for x,y,z axes 

low frequency gains, residual tilt for x,y axes 

gains for modifying calculated gravitational acceleration compo 
nents corresponding to residual tilt, for x,y,z axes 

gains for modifying the contribution of the gravitational 

accelerations to the required simulator translational acceler 
at ions for x,y,z axes 

washout gains In axes 

transformation between cab fixed axes and earth fixed axes 


cab position relative to earth fixed axes - also used to desig- 
nate translational axes 

high-pass washout filter damping factors for x,y,z axes 


^^ 4 ) 1 , 61 , 11/1 
(1 = 1 , 2 ) 

^°x,y,z 

*-x,y 

^^^x,y 

^^xl,yi, zl 

(1 = 1 , 2 ) 


high-pass washout filter damping factors for axes 

long term filter damping factors, for x,y,z axes 
load factors along x,y axes 

load factors contributions to be produced by residual tilt 
high-pass washout filter undamped frequencies for x,y,z axes 


(1 = 1 , 2 ) 


(J)Q 


x,y,z 


“L 


x,y 


0) 




high-pass washout filter undamped frequencies for (|>,6,iJ/ axes 

long term filter undamped frequencies for x,y,z axes 
factors used in residual tilt calculations 

gains multiplying the contribution to the required of 

the error between cab position and required residual tilt 


IV 



Euler angles used to orient the cab relative to earth fixed axes. 
Euler angle sequency is Also used to designate roll, 

pitch and yaw axes, respectively, for both aircraft body axes and 
simulator axes 
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SUMMARY 


A two-pxlot moving base sxmulator experxment was conducted to assess the 
effects of servo failures of a flight control system on the transient dynamxcs 
of a Bell UH-IH helxcopter. The flight control hardware consxdered was part 
of the V/STOLAND system built by Sperry wxth control authoritxes of from 
20-40%. Servo hardover and oscillatory faxlures were sxmulated xn each 
control axis. Measurements were made to determxne the adequacy of the fail- 
ure monitoring system time delay and the servo center and lock txme constant, 
the pxlot reactxon txmes, and the altxtude and attxtude excursxons of the 
helicopter at hover and 60 knots. 

Safe recoveries were made from all faxlures under VFR conditxons. Pilot 
reaction times were from 0.5 to 0.75 sec. Reduction of monitor delay times 
below these values resulted in significantly reduced excursion envelopes. 

A subsequent flight test was conducted on a UH-IH helicopter wxth the 
V/STOLAND system installed. Series servo hardovers were introduced in hover 
and at 60 knots straight and level. Data from these tests are included for 
comparison. 


INTRODUCTION 


The primary objective of this simulation was to assess the recovery char- 
acteristics of a given helicopter subjected to a single axis failure of a low 
authority (20-40%) control augmentation system with mechanical backup. For 
the simulation, a UH-IH helicopter was modeled (ref. 1) with an augmentation 
system of parallel and series actuators. The flight control hardware was of 
the type being installed on a UH-IH at Ames as part of the V/STOLAND research 
flight system, and is similar in its actuator installation to several previous 
experimental systems (e.g., HOWAC, ALARMS, and HENILAS). A desired outcome 
of this study was to determine safe altitude-airspeed operating limits in the 
event of failure of the augmentation system. 

This simulation required a two-pilot operation with a research pilot 
handing off control to the safety pilot during the failure. Since motion cues 



are important when assessing the severity of the failure, the safety pilot 
(recovery pilot) was situated in a single place six-degree-of-freedom motion 
simulator. The research pilot was located in a fixed-base simulator which was 
deemed suitable since he serves no role after the failure is introduced. Both 
pilots were in voice communication with each other and were presented with the 
same visual scene. 

The failures simulated were single axis failures which resulted in either 
an oscillatory or hardover motion of the series actuator resulting in uncom- 
manded movement of the control to the main rotor or tail rotor. 


SYSTEM DESCRIPTION 


Helicopter Control System 

The flight control hardware modelled for this simulation represented the 
V/STOLAND control system. The V/STOLAND system is an integrated navigation, 
guidance and flight control system, to be used on a UH-IH helicopter for con- 
ducting in-flight simulation. Elements of this system are shown in figure 1. 
The left-hand seat is designated as the research or evaluation side while the 
right-hand seat is the safety pilot side and its controls will remain essen- 
tially as a basic UH-IH. 

The flight control portion of the V/STOLAND system is one which utilizes 
a combination of a parallel and a series actuator in the linkage of each con- 
trol. Both actuators are driven by the control laws as programmed in the 
onboard 1819B digital computer. Functionally, the series actuators, which are 
limited in authority (approximately 20-40%), are the faster responding actua- 
tors and thus act primarily on the transient behavior. The parallel actuators, 
are full authority rate servos which act to off-load the series servos and 
thus provide a trimming function. Control schematics of the cyclic, pedal, 
and collective servo installation are shown in figures 2, 3, and 4, respec- 
tively. One additional hardware element of the V/STOLAND control system is a 
disconnect device on the research stick which allows that stick to operate in 
a fly-by-wire mode. As indicated above, all flight control experiments will 
be flown from the left seat and thus in the event of a system malfunction or 
failure, control will revert to the right-hand seat. It is this area, that is, 
the effects on vehicle dynamics under a fail condition and the hand-off of 
control from the research pilot to the safety pilot, that this simulation 
addressed. 


Potential System Failures 

An integral part of the V/STOLAND system is a safety monitor system. 

When a malfunction is detected (which in many cases results in a hardover 
command) the monitor will disengage the servos after a prescribed time delay 
and annunciate the failure to both pilots. The monitor time delay, which was 
a variable in this study is of the order of 1 sec or less. 
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Figure 1.- UH-IH V/STOLAND system block diagram. 







Figure 2.- Cyclic controls 
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For initial consideration, there are three types of servo responses to 
system failures, hardover, fixed, and oscillatory. Some of the typical 
causes of such failures are described below. 


System Failure Hardover Fixed 


Data adapter or computer X X 

Analog commands to servos X X 

Loss of stick sensors X 

Loss of pedal or collective sensor X 

Loss of rate gyros 

Loss of attitude gyros X 

Servo failure X X 


Oscillatory 


X 

X 


A particular variant of the hardover failure worthy of comment is the 
ramping or drifting servo. While this type of failure along with the fixed 
failure present their own subtle problems, they do not result in the abrupt 
transient vehicle motion which is characteristic of the hardover and oscilla- 
tory failures. For this reason they were not pursued in this simulation. 

In addition to these specific objectives, the simulation had the general 
objective of familiarizing the pilots with the V/STOLAND system, its failure 
modes, and general procedures during failure and hand-off of control from the 
research pilot to the safety pilot. 


Piloting Tasks and Flight Conditions 

Two flight conditions were chosen as representative for evaluation of the 
failures: 60 knots level flight cruise and hover out-of-ground effect. 

The hover condition is critical because it represents a maximum power 
condition (maximum collective pitch) with attendant maximum left pedal require- 
ment in the steady-state, prefailure trim condition. Thus, control margins 
for collective pitch and pedal available for recovery are a minimum in this 
situation. 

The 60-knot cruise condition is not critical from a control margin stand- 
point but IS a typical flight speed for the UH-IH, corresponding to the mini- 
mum power required point of a speed-power required curve. Landing approach 
and climbout after takeoff are conducted at about 60 knots. Maneuvers for NOE 
flight are typically flown in the 40 to 60-knot speed range. Therefore, fail- 
ure excursions data obtained at 60 knots is likely to be of general benefit to 
users conducting experiments in these flight regimes. 

For the hover task, the helicopter was trimmed in the hover condition at 
8700 lb (38,698 N)^ross weight. The research pilot was instructed to lift- 
off and climb above a line of trees immediately in front of the helicopter, 
gradually bringing the helicopter to a stable hover about the tree line. Some 
freedom was given to the research pilot to make small maneuvers (pedal turns, 
lateral translations) when a steady hover altitude, immediately above the tree 
line, was reached. 
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SIMULATION TEST PLAN 


General Description of Simulation 

The requirement in this experiment was to simulate single failures of 
elements in the research control system of the UH-IH helicopter during a typi- 
cal flight task. Such a task involves a research pilot flying an augmented 
version of the helicopter from the left seat, while a safety pilot monitors 
the aircraft from the right seat. Should a failure of one of the servos occur 
during flight, it is the job of the safety pilot to assume control and make a 
recovery. Normally, such failures will be detected and displayed to the pilot 
through V/STOLAND safety monitoring system; however, the pilot may detect the 
failure first, from motion and visual cues. Any lead time available to the 
safety pilot from these cues is important, because it hastens the recovery 
action and minimizes the perturbations to the helicopter. The use of a motion 
base simulator was therefore necessary for a realistic evaluation of the 
safety pilot's ability to detect the failures. The motion simulator for this 
experiment was a single seat, six-degree-of- freedom simulator which incorpo- 
rated a black and white TV monitor. Motion washout was used to keep the cab 
excursions within its physical limits. To simulate two-pilot operation, it 
was necessary to situate the research pilot in a second, fixed-base simulator 
remotely located from the first. Both pilots were in voice contact and were 
presented with the same visual scene of a terrain model. Figure 5 shows the 
overall setup for this simulation. 

The software for this all-digital simulation included the basic UH-IH 
helicopter (ref. 1), the flight control augmentation and the servo actuator 
complex (appendix A), and the failure logic. The flight control scheme was a 
pref liter model following type. The helicopter was flown in the augmented 
mode by the research pilot in the fixed-base simulator until the failure to a 
servo actuator was introduced. In the actual aircraft, the safety pilot always 
has a direct connection to the aircraft controls. In the simulation, however, 
the logic was designed so that the safety pilot's inputs were ignored by the 
computer until the moment when the failure was Introduced. At any time after 
that, the safety pilot had control of the aircraft. 

Each failure was introduced to one series servo at a time as either a 
servo oscillation or a servo hardover. All other seven servos, both series 
and parallel, continued to function normally for a period of time correspond- 
ing to the "time-delay" phase of the V/STOLAND monitoring system. "Normal 
functioning" in the simulation was generally evidenced by rapid movements of 
the good servos attempting to correct for the upset of the aircraft introduced 
by the failed servo. 

At the end of the time delay phase, typically one second, all series 
servos, including the failed servo, begin to go to center-and-lock position, 
the research pilot's inputs no longer have any effect on the controls, the 
parallel servos are frozen and the panel warning light goes on. The series 
servos are essentially in their center positions after one center-and-lock 
time constant (typically three seconds). The sequence is illustrated 
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schematically in figure 6 showing the position of a failed series servo 
during a handover failure. 

The model flown by the safety pilot did not fully revert to the unaug- 
mented UH-IH model until the end of the center-and-lock period of the servos. 
The pilot generally was able to detect that a failure had occurred before this 
time by available motion and visual cues. 

All pilots were given some familiarization time in the moving base simu- 
lator prior to obtaining the data. This familiarization consisted of undi- 
rected flying at hover and 60 knots of the unaugmented helicopter and of the 
augmented helicopter with announced failures. All failures given for the data 
runs were unannoimced failures. 


Test Objectives 

The test objectives were: (1) to determine if the failure criteria time 

delays, and the servo center-and-lock time constant of the Sperry specifica- 
tion (ref. 2) were adequate, (2) to determine the altitude, horizontal posi- 
tion, and angular excursions associated with normal failures, so as to define 
sa-^e operating margins when flying with the system, (3) to measure pilot reac- 
tion time to the failures, and (A) to measure rotor flapping excursions during 
the failures. 

A single axis failure was then given to the pilot at the discretion of 
the experimenter. Control reverted to the safety pilot in the motion simula- 
tor, who then made the recovery. 

For the forward flight task, the helicopter was trimmed in an initial 
condition at 60 knots, flying along a lifte of hills and toward the crest of 
one particular hill. The research pilot was instructed to track a line of 
white disks delineating a slowly curving ground track. Very precise tracking 
was not required. Failures were then initiated at the discretion of the 
experimenter, either in level trimmed flight or in moderate (below 30“ bank 
angle) turns . 

In both flight tasks, the physical terrain features were intended to 
provide some reference for the safety pilot as he made his recovery, so that 
excursions would not be unrealistically large due to the single factor of 
having no readily available position and attitude cues. 

Instructions to the safety pilot were to bring the helicopter to an 
unaccelerated flight condition and arrest sink rate as quickly as possible 
following his detection of the failure from motion or visual cues. He was 
permitted to track the cyclic stick with his hand during the prefailure 
flight condition. Both pilots actually could make inputs to the helicopter 
during the "time delay" phase (fig. 6) of the failure sequence, however, the 
research pilot was instructed to relinquish control as soon as he detected the 
failure, and his controls became inoperative after the monitor time delay 
phase. 
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Figure 6.- Hardover failure sequence. 
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Recovery criteria.- Following a failure from a nominally unaccelerated 
flight condition, the helicopter was recovered by the safety pilot. In ana- 
lyzing the failure records, three recovery criteria were considered: 

(1) recovery to an unaccelerated flight condition, (2) recovery to zero rate • 

of climb, and (3) pilot's assessment of recovery. 

A truly unaccelerated flight condition in all axes was seldom achieved i 

before a run was ended by the pilot. Therefore, the acceleration criterion 
for recovery was not used in evaluation of the data. In practice, the pilot's 
remark ("I have recovered" or "I have control") was sufficiently delayed that 
the maximum excursions in attitude and position of the helicopter had been 
attained. Including arresting the sink rate to zero. Therefore, this crite- 
rion was considered appropriate. 

Displacements of the helicopter center of gravity following a servo fail- 
ure were calculated based on an earth-fixed reference system. At the instant 
of failure, an axis system was frozen with axes as follows (fig. 7). 

origin aircraft center of gravity at instant of failure 

X axis parallel to earth and lying in the aircraft plane of symmetry 

Y axis parallel to earth and normal to the X-axis 

h axis normal to X and Y axes 

All helicopter excursions (X, Y, and h) were then computed in this system. 

For failures occurring at 60 knots, the X displacements have no significance. 

Test ■plan.- The tests were divided into two general groups: (1) evalua- 

tion of hardover failures of the series servos and (2) evaluation of oscilla- 
tory failures of the series servos. 

Within the hardover failure group, there were two system variables evalu- 
ated - the time delay tj) of the failed servo and the center-and-lock time 
constant tql servos, including the failed servo. 

Within the oscillatory failure group, there are no additional system 
variables to be considered. The seirvos were allowed to oscillate at their 
natural frequency, a failure resulting from loss of the damping feedback term 
to the servo. , 

The scope of the tests is shown in table 1, 

All of the test conditions were flown with the simulator cab enclosed and 
with washed-out cab motion. Some preliminary runs for the hover case were 
made without washout - that is, the ratio of cab motion to calculated aircraft 
motions was one - and the simulator cab was opened to surrounding scene. 

These runs were useful for general familiarization and evaluation of moving 
base handling qualities of the model, but many failures at one-to-one motion 
resulted in overloading and cutout of the motion drive system. Therefore, 
motion washout was a necessity in these tests. 
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TABLE 1.- SCOPE OF TEST PLAN. 


Number of pilots 
Types of failures 


Monitor time delay, sec 
Center- and-lock 

time constant, sec 
Axes 


Flight conditions 


a 

Standard value 


A 

Hardovers, single axis 
Oscillatory, single axis 
0.25, 0.50, 1.0, a 5.0 
3.0,® 1.0, 0.5 

Collective - UP, DN 

Pitch - UP, DN 

Roll - L, R 

Yaw - L, R 

Hover, 60 knots 

Gross weight, 8700 lb (38,698 N) 


For selected axes, either the monitor time delay or the center-and-lock 
txme constant was varied while holding the other characteristic at its stand- 
ard value. The values were changed in sequential runs so that the pilot could 
make direct comparisons. 


RESULTS 


The data collected from this simulation will be discussed under five 
classifications: hardover failures at hover, hardover failures at 60 knots, 

oscillatory failures, effects of monitor delay times, and effects of servo 
center-and-lock time. In each case maximum excursions in 0, (j), X, Y and h 
were recorded. These maximum occurred sometime between the introduction of 
the failure and the annunciation by the pilot that he had control (usually 
within 5 to 7 sec). Also recorded was the rotor flapping angle. 

The quasi-static rotor flapping equations used permitted only a steady- 
state estimation of the flapping during a servo hardover failure. 

The results show that the limit flapping value of 12® was not reached in 
any of the runs. Peak values of 8° occurred in the roll and collective down 
hardover failures at 60 knots. Flapping values were generally higher at 
60 knots than in hover. Subsequent tests in flight showed that the measured 
flapping values agreed well with the simulated values in hover and were gener- 
ally less than the simulated values in forward flight. While the flight tests 
were brief and some of the conditions varied from those of the simulation, the 
comparison does show the rotor equations to be a useful representation. 

Prior ro each data run rhe pilots were asked to "fly" the simulation of 
the unaugmented UH-IH from 60 knots to hover. Generally the pilot agreed the 
simulation was more difficult to fly near hover than the real helicopter. 
Primarily, the pilots indicated that the simulation didn't feel as well damped 
in pitch and roll as the real helicopter. A comparison between the responses 
or the model and response data of a UH-IH in flight may be found in 
reference 1. 
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Hardover Faxlures at Hover 


Single axis failures were introduced randomly and unannounced from a 
loiter position at approximately 100 ft (30.5 m) altitude. The visual cues 
during this phase were provided by conifer type trees in the foreground and 
rolling terrain in the background as displayed on a single uncollimated black 
and white TV monitor The most frequent complaint with this type of presenta- 
tion was related to the limited field of view available (38° vertical by 48° 
horizontal) , particularly when performing a hovering task. 

Table 2(a) summarizes the hover hardover failure data. Each pilot was 
given each of the eight failures at least once resulting in a total of from 
6 to 13 runs per failure. Shown on table 2(a) are the dispersions of the maxi- 
mum values of each parameter over all the runs as well as the average of those 
maximum values. 

Based on pilot commentary during the tests, the more severe failures were 
pitch-up and yaw in either direction. However, the severity in the pitch-up 
failure was due, in part, to the loss in the visual scene because of the 
limited field of view TV monitor. During the yaw failures the pilot expressed 
a concern over the remaining margin available in the directional controls. 

This limited control margin inhibited the pilots' ability to arrest the yaw 
rates. 

By referring to table 2(a), it can be seen that for all failures except 
collective, the pilot reaction times were generally from 0.5 to 0.7 sec. In 
collective, however, the reaction times were longer. This longer reaction 
time is consistent with pilot commentary regarding the difficulty he had in 
detecting some of the collective failures. 

Following this simulation, a brief flight test of servo hardovers was 
performed using the V/STOLAND hardware on a UH-IH helicopter. The hover hard- 
over tests were conducted at an altitude of 15-25 ft (4 5-7.6 m) and the 
results are shown for comparison on table 2(b). Unlike the simulation, the 
flight failures were announced hardovers and subject to a monitor time delay 
of 0.5 sec. This monitor time is a reduction from the 1.0 sec originally pro- 
posed for the V/STOLAND system (ref. 2) and used for the simulator study. 

Even with these differences the data on table 2(b) shows a reasonable correla- 
tion with table 2(a) both in magnitude and trend. 


Hardover Failures at 60 Knots 

The 60 knot failures were introduced while the pilot was flying a marked 
track over irregular rolling terrain. His nominal altitude was between 
50-200 ft (15.2-61 m). 

Table 3(a) shows a summary of the 60 knot failure data. As with the 
hover data the pilot reaction times (except for collective) were of the order 
of 0.5 to 0.7 sec. The pitch-up and yaw failures were again considered by the 
pilots to be the more severe. The roll failures, particularly left roll, were 
considered to be severe but manageable. 
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TABLE 2.- HARDOVER DATA AT HOVER 





Largest maximum value 


Key: 


22 
— 15- 
10 . ^ 


•Averaged value 


Smallest maximum value 























TABLE 3.- HARDOVER DATA AT 60 KNOTS 


Failure 

e 

, 



AX 

AY 

Height loss 

Pilot 

Rotor 

Number 

deg 

deg 

ft 

m 

ft 

m 

ft 


reaction 

flapping 

of runs 

(a) Simulatxon 

Pitch 

dn 

16 

4 

10 

i 




80 

10 

40 

24.4 

3 

12.2 


14.6 

0 

4.6 

1.5 

0.1 

0.5 

7.2 

12 

Pitch 

up 

35 

1 

15 

18 

2 

13 




- 

- 


^ 2 
0 

3 

0 

0.6 

0.75 

0.5 

0.6 

- 

5 

Coll. 

dn 

16 

5 

10 

23 

5 

11 



75 

40 

58 

22.8 

12.2 

17.6 


30.5 

0 

12.2 

2 

0.5 

1.2 

7.3 

9 

Coll. 

up 

22 

2 

8 

27 

2 

11 



250 

20 

100 

76.2 

6.1 

30.5 

30 , 

0 

9.1 

0 

0.6 

2.5 

0.5 

1.3 

8 

15 

Roll 

rt. 

18 

4 

10 

27 

15 

19 



160 

40 

100 

48.7 

12.2 

30.5 

20 

0 ^ 

6.1 

0 

1.5 

0.75 

0.5 

0.4 

8 

8 

Roll 

It. 

12 

8 

40 

24 



210 

102 

64 

31 

90 1R 

27.4 

5.5 

1 

0.7 

8 

13 

4 

15 



40 

12.2 

0 

0 

0.25 

Yaw rt. 


1 

14 

4 

10 




- 

- 



18.3 

0 

6.1 

0.75 

0.3 

0.6 

- 

5 

Yaw It. 


1 

31 

2 

9 



40 

12 

24 

12.2 

3.7 

7.3 

f 3 

7.6 

0 

0.9 

1.25 

0.5 

0.8 

5 

9 









(b) 

Flight 







Pitch 

dn 

8 



3 

■ 

■ 





16 

4.9 




4.2 


Pitch 

up 

9 . 

5 


5 

■ 

■ 





0 

0 




5.1 


Coll. 

dn 

2 



3 

■ 

■ 





28 

8.5 




2.3 


Coll. 

up 

3 



6 

■ 

■ 





0 

0 




3.2 


Roll 

rt. 

3 


18 


■ 





0 

0 




4.4 


Roll 

It. 

2 


23 

■ 

■ 





- 

- 




5.1 


Yaw rt. 

1 


11 

■ 

■ 





- 

- 




2.9 


Yaw It. 

2 



8 

■ 

■ 





- 

- 




3.1 


























Again for comparison, the flight data for 60 knot straight and level 
series servo hardovers are shown on table 3(b) . These results were for 
announced failures and a monitor time delay of 0.5 sec. A comparison with the 
simulation data of table 3(a) shows a good correlation in trend, however, the 
simulation data resilLted in consistently higher flapping angles. 

Figure 8 depicts the failure envelope which is a summary of the average 
of the maximum values for the hover and 60 knot simulation data. While this 
envelope cannot be considered as absolute it does indicate the likely excur- 
sions for a single failure. 


Oscillatory Failures 

The oscillatory failures were introduced at 60 knots as undamped servo 
responses at 10 Hz. This frequency is typical of actuators used in control 
augmentation applications. In all cases, these failures were considered mild 
in terms of their effects on the handling qualities of the vehicle. A summary 
of these failures is given in table 4. The detection of such failures by the 
pilot often occurred only through system annunciation. This is indicated by 
the rather long pilot reaction times shown in table 4. Of interest for fur- 
ther study would be to determine if a lower frequency of oscillation would be 
objectionable. 


Effects of Monitor Delay Time 

One of the more generally applicable phases of this simulation was one 
which considered varying Tj), the system failure detection time. The failure 
detection time is the time from the onset of a failure to the time when the 
system detects the failure and disengages. Disengagement in this case implies 
the reversion to the unaugmented mode and centering and locking of the series 
servos. A failure detection (or monitor) time delay is often a variable and 
IS usually made long enough to avoid transients or nuisance disconnects and 
yet short enough to provide some aid to the recovery from a real failure. An 
important fact regarding this time is the pilot’s own reaction time; that is, 
if the pilot can react faster than the monitor in disengaging the system, then 
the monitor time may be too long and serve little function in the recovery 
from a failure. Conversely, a monitor time which is consistently shorter than 
the pilot's reaction time, will help reduce the failure excursion envelope. 

The baseline monitor time used in this simulation was 1 sec and as can be seen 
from tables 2 and 3 this was generally longer than the pilot's own reaction 
time. 


The results of variations in the monitor time from 0.25 to 5 sec for a 
roll hardover failure at 60 knots are shown on table 5. Note that for the 
monitor times of 0.5 and 0.25 sec, the average (|) and Y excursions were sig- 
nificantly smaller. Also, note that in most cases the average pilot reaction 
time was of the order of 0.5 sec. This time was also noted for both the hover 
and 60 knot roll data on tables 2(a) and 3(a). Such data imply an upper bound 
of useful monitor time of around 0.5 sec, and that a reduction from that value 
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single; hardover failure envelope*. 

X 

Y 

Z(down) 

Q 

0 


HOVER 

55 FT. (16.7 m) 
80 FT, (24,4 m) 
35 FT. (10.6 m) 
20 DEG. ( 6,1 m) 
22 DEG, ( 6.7 m) 


60 KNOTS 

100 FT. (30.5 m) 
40 FT. (12.2 m) 
15 DEG. ( 4.6 m) 
24 DEG.( 7.3 m) 


Figure 8.- Failure effects simulation results. 



TABLE 4.- OSCILLATORY FAILURES AT 60 KNOTS 


Failure 

9, 


Height loss 

Pilot 

Rotor 

Number 

deg 

deg 

ft 

m 

reaction 

flapping 

of runs 

Pitch 


fu 

^15 

0 

— 4.6 

1 



Coll. 

7 

14 

20 

6.1 

1 



Roll 

00 


f ' 

4.6 

0 

1 



Yaw 

7« 



^6.1 

oS o-” 




TABLE 5.- EFFECTS OF MONITOR DELAY TIME AT 60 KNOTS 


Failure 

Monitor 

e 



AY 

Height loss 

Pilot 

Rotor 

Number 

time delay 

deg 

deg 

ft 

m 

ft 

m 

reaction 

flapping 

of runs 

Roll rt. 

0.25 


10 


12 


25 


14.6 


0 


0 


0.5 

8 


If 

0.5 

12 

8 

10 

16 

6 

11 


100 


30.5 

35 

0 

17 

10.6 

0 

5.2 

0.5 

0.25 

0.4 

9 


II 

1.0 

18 

4 

10 

27 

15 

19 

160 

40 

100 

48.7 

12.2 

30.5 

20 

0 

5 

6.1 

0 

1.5 

0.75 

0.5 

0.4 

8 


II 

5.0 


10 

31 

21 

26 

250 

180 

200 

76.2 

54.9 

61 

40 

0 

20 

12.2 

0 

6.1 


0.5 

7.4 


Roll It. 

0.25 

10 

2 

5 

24 

6 

13 

30 

13 

24 

9.1 

4 

7.3 

100 

0 

26 

30.5 

0 

7.9 

1 

0.5 

0.75 

5.8 


ft 

0.5 

12 

6 

9 

20 

8 

14 

30 

20 

25 

9.1 

6.1 

7.6 

8 

0 

2 

2.4 

0 

0.6 

1.5 

0.25 

0.9 

6.5 


If 

1.0 

12 

8 

40 

24 

210 

102 

64 

31 

90 

18 

27.4 

5.5 

1 

0.7 

8 



4 

15 

40 

12.2 

0 

0 

0.25 


If 

5.0 


9 


16 


90 


27.4 


0 


0 


0.25 

8 






can help reduce the excursion envelope. Pilot commentary for the test runs at 

0.25 sec further supported these results. The pilots reported that, for this 
monitor time, failures were very mild or even undetectable (i.e., detected 
only through the annunciator light on the panel) . Establishing a lower bound 
for monitor time (i.e., one at which nuisance disconnects begin to occur 
"frequently") would be somewhat more tenuous. No attempt was made in this 
simulation to determine this bound, however, previous experience with other 
systems indicates that around 0.1 sec such disconnects do occur. 

In summary, it appears that in cases where minimizing the failure excur- 
sion IS of prime importance (e.g., flying close to the ground), then a monitor 
time of 0.25 sec or less should be considered. 


Center- and-Lock Time 

The last phase of this simulation considered variations in the centering 
and locking time of a failed series servo. The center-and-lock function is a 
built-in feature of certain series servos and results in a motion of the con- 
trol linkages while centering occurs. The intent of this part of the study 
was to determine whether the rate at which the centering occurs could conflict 
with the pilots own control inputs. Table 6 shows the results of variations 
in the center-and-lock time for a pitch failure at 60 knots. The pilot commen- 
tary for this sequence was somewhat mixed, however, all four pilots tended to 
favor the faster center-and-lock time of 0.5 sec. It was interesting to note 
that one pilot found the 1 sec centering time conflicted with his own control 
corrections, causing overshoot in the vehicles motion. This perhaps indicates 
a centering time which was approaching the pilot's own natural time constant. 
The data show no marked trend for variations in the centering time. 


CONCLUSIONS 


1. No failures produced a flight condition from which recovery was not 
possible. The maximum altitude loss seen in any failure was 100 ft (30.5 m) , 
however, that was for a case when the pilot was not constrained by low 
altitude flight. 

2. Pilot reaction time to most hardover failures was from 0.5 to 
0.75 sec. 

3. Reducing the monitor time to below 0.5 sec significantly reduced the 
hardover failure excursion envelope. Where minimizing the excursion is of 
prime importance, a monitor time of 0.25 sec or less should be considered. 

4. A wide variation in center-and-lock time following a failure had 
little effect on the pilot's recovery. There is a range of center-and-lock 
time around 1 sec which causes overshoot, perhaps because of the proximity to 
the pilot's time constant. 
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TABLE 6.- EFFECTS OF CENTER- AND-LOCK TIME 


1 

Failure 

Center- 
and-lock 
time, sec 

1 

0 , 


AY 

Height loss 

1 

Pilot 

Rotor 

Number 

deg 

deg 

ft 

m 

ft 

m 

reaction 

flapping 

of runs 

Pitch dn 

3 

¥io 

4 

16 9 

3 

^40 

10 

12.2 

^15 
0 ^ 

12-2 , . 
0 

^•5 0 5 
0.1 

7.2 


tt 

1 

^13 

7 

5 ^ 

f 15 

6-1 / A 

1.5 

AO 14 
0 

12.2 

0 

J:i 0-6 

6.4 


H 

0.5 


2 ^ 

f 22 

^5-2 ft 7 
1.5 

AO 

0 ^ 

12.2 

2 7 

0 

0 7 

0.1 

5.8 





5. The pxlots considered the oscillatory failures to be very mild. 


6. Calculated rotor flapping excursions were well within flapping limits 
however, more detailed analysis or substantiating flight test is warranted. 

7. Excursions from announced hardovers during flight tests showed 
reasonable correlation with the simulator results. 
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APPENDIX A 


CONTROL SYSTEM MODEL 


The control system software for this simulation was a prefllter model 
follower type. This system was flown from the fixed-based simulator and was 
the mode to which all failures were Introduced. Since the Intent of this simu- 
lation was to evaluate the recovery from a failure, no major effect was made 
to optimize the control system. Rather, the characteristics chosen for the 
model follower represented "good" handling qualities as determined from a pre- 
vious simulation (ref. 3). For pitch and roll the model selected was an atti- 
tude command type while In height and yaw a rate command type model was used. 
The control equations which provide the commands to the actuators were simple 
sums of the differences between the model states and the corresponding air- 
craft states. These equations are listed below. 


t 


Roll 

Pitch 

Yaw 

where 

Height 

where 


Model Equations 

0.56a = W + 1.4(2)V + 

0.36g = 6m + 1.4(2)00 + 

0.76p = Jliin + 3<I)o - (o.OOOSUgVB + sin i|))f(u) 
Sp = - 5pic 

10.66^ = hm + hm 

«c = «c - «cjc 


The control inputs are in inches, the angles In radians, and hjjj is in feet 
per second. The function f(u) is a switching term for turn coordinations 
above 30 knots. 


Control Equations 


Roll 

Uai = 863 + 6 <)>o - 8 (|) + 4>jjj - 5^ 

Pitch 

Ubi = -7.356g + 60JJ - 100 - l.SO^ - 40 

Yaw 

UxR = 8 sin(\J^^ + sip 
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where 


K = K - he 

Ue^ = 16(hm - h) + hm - 4h 


Hexght 


The control commands (U^l , etc.) drive the parallel and series actuators, as 
shown on figure 9. Since the series is a position servo and the parallel is a 
rate servo, the parallel responds so as to null the control commands and thus 
zero (or off-load) the series servo. 


Servo Actuators 

The autuator complex consists of a series, a parallel and a boost actua- 
tor in each axis. The boost is the standard UH-1 hydraulic type. The charac- 
teristics, authorities, and rate limits of each of the actuators are given in 
table 7. 


TABLE 7.- ACTUATOR CHARACTERISTICS 


Axis 

Authority,® 

% 

Dynamics 

Rate limits,^ 
deg/sec 

Roll 




Series 

±30 

o)o = 75 r/sec; ? = 0.7 

±20 

Parallel 

±100 

1/t = 40 r/sec 

±1.37 

Boost 

±100 

1/t = 50 r/sec 

±20 

Pitch 




Series 

±25 


M 

Parallel 

±100 



Boost 

±100 



Yaw 




Series 

±37 

II 

It 

Parallel 

±100 



Boost 

±100 



Collective 




Series 

±20 

II 

It 

Parallel 

±100 



Boost 

±100 




^Computed based on center to full of actuator over center to 
full of control linkage. 

^Relative to swash plate motion. 
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Figure 9.- V/STOLAND single axis block diagram. 





APPENDIX B 


FACILITIES 


The facilities used for this experiment were the Ames Research Center 
six-degree-of-freedom moving-base simulator (S.Ol), a fixed-base chair cab 
simulator (Chair 6) , and a Redifon six-degree-of-freedom closed circuit tele- 
vision visual flight attachment (VFA-02). The simulation computer used was an 
EAI-8400 digital computer having a 32,000 word memory. 


S.Ol Motion Simulator 

The simulator is shown in figure 10. Motion limits for this simulator are 
summarized in table 8. Position drive signals were used for all degrees of 
freedom. For this simulation, lead compensation was used to improve the fre- 
quency response of the system. The frequency response characteristics of the 
basic simulator with lead compensation gains for each axis are shown in fig- 
ure 11. These characteristics are independent of the motion drive system 
logic, or washout, used to keep the simulator within its physical bounds and at 
the same time provide the pilot with motion cues representative of the simu- 
lated aircraft. The motion drive logic is presented in a separate section 
below. The section was provided by Mr. Vernon K. Merrick of FSD Branch whose 
contribution is gratefully acknowledged. The data for the basic frequency 
response characteristics were obtained by a program called SAFE, documented in 
reference 4. 


TABLE 8.- SUMMARY OF SIX-DEGREE-OF-FREEDOM (S.Ol) 
SIMULATOR CHARACTERISTICS 


Axis 

Displacement 
limits (±) 

Velocity 
limits (±) 

Acceleration 
limits (±) 

Roll 

Pitch 

Yaw 

Long. 

Lateral 

Vertical 

35° 

35° 

35° 

9 ft (2.7 m) 
9 ft (2.7 m) 
9 ft (2.7 m) 

1.3 rad/s 
1.7 rad/s 
3.0 rad/s 

9.0 ft/s (2.7 m/s) 

8.0 ft/s (2.4 m/s) 
7. 5 ft/s (2.3 m/ s) 

10 rad/s^ 

4.5 rad/s^ 

3.0 rad/s^ 

7.5 ft/s^ (2.3 m/s^) 
9.2 ft/s^ (2.8 m/s^) 
8.8 ft/s^ (2.7 m/s^) 


The pilot's panel instruments are shown in figure 12 and described in 
table 9. The cab was operated closed, with visual information presented by an 
uncollimated black and white TV monitor located above the instrument panel. 

Cab controls consisted of pedals, cyclic stick and collective lever, with 
force gradients representative of a UH-IB helicopter. Pedal forces were 
obtained with bungee cords. A McFadden control loader was used to provide 
forces on the cyclic stick. Use of this loader restricted control travels 
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Figure 10.- 


S.Ol 


six-degree-of-freedom motion 


simulator. 


4 -^ 
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Figure 11.- Frequency response characteristics of S.Ol simulator without washout. 
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Figure 11.- Concluded. 




Figure 12.- Pilot's instrument panel - S.Ol cab. 
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TABLE 9.- PILOT'S PANEL INSTRUMENTS: S.Ol CAB 

(see fig. 12) 

1. Indicated airspeed 

2. Attitude indicator 

3. Altimeter (not present in photo) 

4 . Turn/bank 

5. Rate of climb (IVSI) 

6. Failure warning light 


slightly below UH-1 values, but the gradient values were maintained. The 
collective lever had a manually adjustable friction level. The control travel 
and gradient values are summarized in table 10. Static and dynamic friction 
levels of the cyclic and pedal controls were not matched with those of the 
helicopter, but were considered acceptable by the pilots. The trim system was 
identical in function to that provided for Chair 6, described below. 


TABLE 10.- CONTROL TRAVEL AND FORCE GRADIENT VALUES: S.Ol CAB 


Control 

Gradient , 
Ib/in. (N/cm) 

Travel, 
in . ( cm) 

Longitudinal cyclic 

1.06 (1.93) 

±6.25 (±15.24) 

Lateral cyclic 

0.8 (1.46) 

±5.5 (±13.41) 

Pedals 

5.8 (10.6) 

±3.25 (±7.92) 

Collective 

0 

0-10.45 (0-25.48) 

Collective friction 

Adjustable approx. 3.7 
(16.46) 



Chair 6 Fixed-Base Simulator 

This simulator is shown in figure 13. A framework contains the pilot's 
seat; aircraft instrument panel; cyclic, pedal, and collective controls; and a 
color TV monitor with collimating lens. Gradients on the pedals and cyclic 
controls were provided by spring cartridges with movable ground points. The 
trim system duplicated the helicopter's. A force-release button on the cyclic 
grip disengaged a magnetic brake allowing the ground points for the spring 
cartridges to be moved. Release of the button restored the spring gradients 
with zero force at the release position of the controls. Friction level in 
the collective lever was adjustable by the pilot. Control travels and force 
gradients used were representative of a UH-IB helicopter and are shown in 
table 11. Pilot's panel Instruments are identified in figure 13 and described 
in table 12. 
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Figure 13.- Pilot's instrument panel - Chair 6. 
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TABLE 11.- CONTROL TRAVEL AND FORCE GRADIENT VALUES: CHAIR 6 CAB 


Control 

Gradient , 
Ib/in. (N/cm) 

Travel, 
in. (cm) 

Longitudinal cyclic 
Lateral cyclic 
Pedals 
Collective 
Collective friction 

1.0 (1.8) 

0.8 (1.46) 

5.8 (10.6) 

0 

Adjustable approx. 3.7 
(16.46) 

±6.33 (±15.43) 
±6.2 (±15.11) 

±3.25 (±7.92) 
0-12.2 (0-29.75) 


TABLE 12.- PILOT'S PANEL INSTRUMENTS: CHAIR 6 CAB 

(see fig. 13) 


1. 

Rotor/engine RPM (NU) 

6. 

Heading indicator 

2. 

Indicated airspeed 

7. 

Rate of climb (IVSI) 

3. 

Attitude indicator 

8. 

Percent turbine RPM (NU) 

4. 

Altimeter 

9. 

Tum/bank 

5. 

Torque pressure 

10. 

ILS instrument (NU) 

NU 

= Not Used 

11. 

Failure warning light 


VFA-02 Visual 

Flight 

Attachment 


This facility consists of scale terrain model scanned by an optical probe 
mounted on a movable gantry. Rotation of the probe and its optical elements 
duplicate the angular orientation of the simulated aircraft cockpit scene with 
respect to the earth, while scaled linear motions of the gantry duplicate air- 
craft position. The probe picture is recorded by a 525-line color TV camera. 
The field of view at the pilot's eye subtends an arc 36® vertically and 48° 
horizontally. Motions of the simulated aircraft calculated by the simulation 
computer are used to drive the probe. Linear motions of the optical probe were 
scaled at 1:600 with aircraft motions. The motion characteristics for VFA-02 
are summarized in table 13. 


Motion Drive Logic for S.Ol 

The motion drive logic is designed to convert the calculated motion of the 
simulated aircraft into drive signals which move the simulator cab, within its 
physical limits, such that the combined effects of cab acceleration and gravity 
subject the pilot to forces which are the best approximation to those that he 
■would experience flying the real aircraft. The "best approximation" is that 
which gives the best representation of those forces which provide the pilot 
with motion cues and which, therefore, can influence his control of the 
aircraft . 
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TABLE 13.- SUMMARY OF VISUAL FLIGHT ATTACHMENT (VFA-02) CHARACTERISTICS 


Axis 

Displacement 

limits 

Velocity 
limits (±) 

Acceleration 
limits (±) 

Frequency 
at 30° 

phase lag, Hz 

Roll 

100° 

2 rad/s 

4.2 rad/s^ 

1.70 

Pitch 

+20°, -30° 

3 rad/s 

16 rad/s^ 

8.50 

Yaw 

Unlimited 

0.333 rad/s 

2 rad/s^ 

0.80 

Long.^ 

4 mi. (6.44 km) 

185 knots 

15 g 

0.40 

Lateral^ 

±0. 5 ml. (0.81 km) 

180 knots 

8.5 g 

0.56 

Vertical^ 

750 ft (228.6 m) 

3300 ft/min (16.76 m/s) 

5.5 g 

0.75 


^At scale 1:600. 




The motion drxve logic xs shown in figures 14 and 15. The xnputs are the 
calculated axrcraft accelerations at the pilot station (Ax,y,z 

the actual position of the sxmulator cab (AftTv « ■,) • The output is the ^ 

x^y y z 

requxred cab posxtlon (AsDxyz* ^SD,j, q ^ shown xn figures 14 and 15, the 

calculated aircraft acceleratxons at the pilot station are passed through 
fourth-order washout filters whxch strongly attentuate the low frequency com- 
ponents, whxle allowxng the high frequency components to pass virtually 
unchanged. If the low frequency components of acceleration were passed 
unattenuated to the simulator drive system they would quickly cause the cab to 
move to xts positxon Ixmits. To recover the motion cues assocxated wxth the 
low frequency translatxonal acceleratxons, the cab is rotated (resxdual txlt) 
so that gravxty provxdes components of force, acting on the pxlot, whxch are 
roughly equivalent to the calculated low frequency translatxonal inertxal 
forces. This resxdual txlt technique can be used only for force compensatxon 
xn the horxzontal plane and must be accomplxshed at cab rotatxonal accelera- 
txons sufficxently low to be undetectable to the pilot. The resxdual tilt xs 
calculated as shown in fxgure 15 and its degree xs controlled through the 
parameters ojlj, and KlLk* 

The cab rotatxonal commands, AgOji^, from the motion drive logxc contaxn 
some hxgh frequency components whxch, xf uncompensated, would produce false 
translatxonal motxon cues through the effects of gravity. These spurxous 
motion cues are removed by cab translational acceleratxons such that the corre- 
spondxng xnertxal forces cancel the unwanted high frequency gravxtatxonal 
forces but not the low frequency (residual tilt) gravitational forces. Thxs 
type of compensation is produced in computations shown at the top of figure 14 

and its degree is controlled by the parameters and Kj] . 

■J J 

The signals resultxng from the calculations described above may still 
contaxn some residual low frequency translational acceleratxon components. To 
ensure that these acceleration components do not cause excessxve cab transla- 
txon, the translatxonal velocxtxes and positxons derxved from the accelera- 
txons AxSj are passed through second-order washout (hxgh pass) fxlters shown 
xn fxgure 14. 

Addxtlonal translatxonal posxtxon limitxng xs provxded to protect agaxnst 
xnadvertently drxvxng the simulator hard into its stops. For each transla- 
txonal axis, calculatxons are performed which contxnually determxne the travel 
remaxnxng xn the dxrectxon of motxon of the cab. Thxs distance, the drive 
acceleratxon Ixmxts, the computatxon frame time, and the computed cab velocxty 
are used to determine whether or not the cab must be gxven additxonal decelera- 
txon to avoid contact wxth the stops. Any deceleration command from this 
logxc xs contxnued until both the commanded acceleration and velocxty change 
sign. If thxs additxonal translatxon positxon Ixmitxng logxc becomes actxve 
durxng a sxmulatxon test xt wxll xntroduce spurxous motxon cues. 

In setting up the sxmulatxon, the parameters of the motxon drxve logxc 
are adjusted untxl the motxon cues feel subjectxvely correct for the type of 
axrcraft sxmulated and the type of task to be flown. The motxon drxve logxc 
parameters used for the simulatxon descrxbed in thxs report are given xn 
table 14. 
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Figure 14.- Translational axes motion drive logic for S.Ol simulator. 
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Figure 15.- Rotational axes motxon drxve logic for S.Ol simulator. 










TABLE 14.- COEFFICIENT VALUES FOR S.Ol SIMULATOR MOTION DRIVE LOGIC 


Symbol 

Value 

Units 

“Hxl* <^Hx2 

0.4, 0.4 

rad/s 

<^Hy2 » ^Hy2 

0.4, 0.4 

rad/s 

COu « U)ij 

^zl "z2 

0.4, 0.4 

rad/ s 

%2 

0.5, 0.5 

rad/ s 

“H01* “Hq2 

0.4, 0.4 

rad/s 


0.25, 0.25 

rad/s 

?Hxi* ^Hx2 

1.4, 1.4 



1.4, 1.4 


%2 

1.4, 1.4 



1.4, 1.4 


^H0i» ^H02 

1.4, 1.4 



1.4, 1.4 


Kx » Ky , Kg 

0.5, 0.5, 0.5 


K(j| 1 K0 , Kijj 

0.5, 1.0, 0.5 


WLx» l^Ly 

2.0, 2.0 


^LLx ’ ^LLy 

1.0, 1.0 


“Dx» “Dy> ^^02 

0.1, 0.1, 0.1 

rad/s 

?Dy» ^^2 

0.707, 0.707, 0.707 


%x’ ^Ny. KN^ 

0, 1.0, 1.0 


^X’ ^Oy> 

1.0, 1.0, 1.0 


<*>E^. “Eq, <^E^ 

0.1, 0.1, 0.5 

rad/s 

^MLx’ %Ly» ^z 

5.6 (1.7), 6.8 (2.1), 5.5 (1.7) 

ft/s^ (m/s^) 

AmLx> ^MLy> 

8.5 (2.6), 7.5 (2.3), 7.0 (2.1) 

ft/s (m/s) 

^MLx’ ^MLy’ %Lz 

8.0 (2.4), 8.0 (2.4), 8.0 (2.4) 

ft (m) 

AmL(|,> AmL0. Aml^ 

1.2, 1.5, 2.8 

rad/s 

Aml^» AmLq. Aml^ 

0.5326, 0.5326, 0.5326 

rad 
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